Thank you for visiting our website company4.de and for your interest in our company.
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our website.
Our data protection practice is in accordance with the legal regulations of the EU's General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
The following data protection declaration serves to fulfil the information obligations resulting from the GDPR.
These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.
Responsible person
The controller within the meaning of Art. 4 No. 7 GDPR is the person who alone or jointly with others determines the purposes and means of the processing of personal data.
With regard to our website, the responsible person is:
We have appointed a data protection officer in accordance with Art. 37 of the GDPR.
You can reach our data protection officer under the following contact details:
Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the device (e.g. computer, mobile phone, tablet, etc.) used to access it.
What personal data is collected and to what extent is it processed?
(1) Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Message whether the retrieval was successful;
(9) Amount of data transmitted
This data is stored in the log files of our system.
This data is not stored together with the personal data of a specific user, so that individual site visitors cannot be identified.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. f GDPR (legitimate interest).
Our legitimate interest is to ensure the achievement of the purpose described below.
Purpose of the data processing
The temporary (automated) storage of the data is necessary for the course of a website visit to enable delivery of the website.
The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate malfunctions.
For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website.
In addition, we use the data to optimise the website and to generally ensure the security of our information technology systems.
Duration of storage
The deletion of the aforementioned technical data takes place as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.
Possibility of objection and deletion
You can object to the processing at any time in accordance with Article 21 of the GDPR and request the deletion of data in accordance with Article 17 of the GDPR.
You can find out which rights you have and how to exercise them at the bottom of this privacy policy.
Special functions of the website
Our site offers you various functions, during the use of which personal data is collected, processed and stored by us.
We explain below what happens to this data:
Application form
What personal data is collected and to what extent is it processed?
The data entered by you in the form fields of the application form and uploaded, if applicable, will be processed in full to fulfil the purpose stated below.
Legal basis for the processing of personal data
The legal basis for the collection and processing of applicant data is Art. 6 para. 1 lit. b (contract initiation), Art. 88 para. 1 GDPR in conjunction with. § SECTION 26 BDSG.
Insofar as special categories of personal data are collected that are necessary for the fulfilment of legal obligations arising from labour law, social security law and social protection pursuant to Art. 9 para. 2 b GDPR in conjunction with. § Section 26 (3) BDSG, the processing is carried out on this legal basis.
Insofar as special categories of personal data are to be processed in addition, we will obtain consent for this in accordance with Art. 9 para. 2 lit. a GDPR.
Purpose of the data processing
The purpose of the data processing is to check and process the application documents uploaded by you via the form.
Duration of storage
The data is deleted as soon as the application has been processed and there is no longer a justified interest in storing the application data.
Your application documents will therefore be deleted after 6 months at the latest if no employment relationship is established.
Possibility of objection and deletion
You can find out what rights you have and how to exercise them at the bottom of this privacy statement.
Necessity of providing personal data
The information in the application form is neither contractually nor legally required, but is necessary for sending and processing the application. If you do not fill in the mandatory fields or do not fill them in completely, your application cannot be sent or processed.
Mandatory information pursuant to Article 13 of the GDPR regarding the processing of personal data during the recruitment process
Purposes and legal basis
We process your personal data for the purpose of conducting the recruitment process. The processing of your personal data is necessary for the decision on whether to enter into an employment relationship.
The legal basis for the processing of your personal data is Article 6(1), first sentence, point (b) of the GDPR.
Should the processing of your personal data be necessary for the purposes of legal proceedings following the conclusion of the recruitment process, such processing will be carried out on the basis of a legitimate interest pursuant to Article 6(1), first sentence, point (f) of the GDPR. Our legitimate interest in such cases is to defend against claims.
Where special categories of personal data are processed which relate to particularly sensitive areas of life, such as information on religion or health (e.g. degree of severe disability), this is required and permitted under Article 9(2)(b) and 6(1)(b) and (c) of the GDPR, so that we can exercise the rights arising from employment law and the law on social security and social protection, and fulfil our obligations. Where special categories of personal data are processed in addition to this, such processing is carried out in accordance with Article 9(2)(a) and Article 6(1)(a) of the GDPR on the basis of your consent.
Where we have obtained your consent to the processing of your personal data for specific purposes (e.g. inclusion in a candidate pool for future consideration), this processing of personal data is based on Article 6(1), first sentence, point (a) of the GDPR.
Change of purpose
If your application is successful, your data may be transferred to our HR systems and processed for the purposes of managing your employment.
Recipients of personal data
Within our organisation, your personal data will be shared with those departments that require it as part of the recruitment process and for the purpose of making a decision on your appointment. Processors engaged by us (Article 28 of the GDPR) may also receive data for the purposes mentioned above. Where we do not collect the data directly from you and you have an active profile on Indeed, we may also collect personal data via that platform.
Transfer to third countries outside the EU
Any transfer of data to third countries (outside the European Economic Area – EEA) takes place exclusively in accordance with the requirements of the GDPR.
When processing your personal data, we use service providers who are based in third countries or who, in turn, use service providers in third countries. In this context, your data may also be processed outside the European Union, including in the USA. We only work with service providers who can demonstrate adequate safeguards for data protection.
On 10 July 2023, the European Commission adopted an adequacy decision concerning data flows between the EU and the US. The decision establishes that the US ensures a level of protection for personal data comparable to the European standard. Consequently, the US is deemed a safe third country in accordance with Article 45 of the GDPR. The transfer of personal data to the US therefore does not require additional consent. This is subject to the US data recipient having obtained prior certification under the EU-US Data Privacy Framework.
Duration of storage
Your personal data will be processed from the time it is collected and, if an employment relationship is not established, will be deleted six months after the end of the application process.
Should you have consented to the storage of your application documents beyond the application process, we will delete your personal data once the agreed period has expired or upon withdrawal of your consent.
This does not apply if we have a legitimate interest in retaining your data for a longer period (e.g. to establish, exercise or defend legal claims).
Contact form(s)
What personal data is collected and to what extent is it processed?
We will process the data you have entered in the input mask of our contact forms to fulfil the purpose stated below.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR (consent by unambiguous affirmative action or behaviour or explicit consent)
Purpose of the data processing
We will only use the data recorded via our contact form or contact forms for processing the specific contact enquiry received through the contact form.
Duration of storage
After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.
Revocation and deletion option
The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this data protection declaration.
Necessity of providing personal data
The use of the contact forms is on a voluntary basis and is neither contractually nor legally required.
You are not obliged to contact us via the contact form, but can also use the other contact options provided on our site.
If you wish to use our contact form, you must fill in the fields marked as mandatory.
If you do not fill in the required information on the contact form, you will either not be able to send the enquiry or we will unfortunately not be able to process your enquiry.
Mandatory information pursuant to Article 13 of the GDPR regarding the processing of personal data of customers, suppliers and business partners
Purposes and legal bases
We process your data for the purpose of establishing a business relationship, fulfilling our contractual obligations and carrying out all activities necessary for the business relationship. The legal basis is Article 6(1), first sentence, point (b) of the GDPR.
Where you have consented to the processing of your personal data for specific purposes, the processing is based on Article 6(1)(a) of the GDPR.
Where necessary, we process your data beyond the actual performance of the contract to safeguard our legitimate interests or those of third parties in connection with direct marketing, the establishment of business relationships, to ensure IT support and security, and, where applicable, to assess creditworthiness and default risks. The legal basis for this is Article 6(1), first sentence, point (f) of the GDPR.
In addition, we process your personal data to fulfil legal obligations, such as tax-related retention obligations, in accordance with Article 6(1), first sentence, point (c) of the GDPR.
Recipients of personal data
Within our organisation, your personal data is shared with those departments that require it to fulfil our contractual and legal rights and obligations. Data may also be shared with data processors (Art. 28 GDPR) engaged by us for these purposes. Under these circumstances, recipients of personal data may include, for example:
Manufacturers and suppliers
IT service providers
Banks
Postal service providers
Credit reference agencies.
In all other cases, data will only be disclosed to third parties where there is a legitimate interest, a legal or regulatory obligation, or your consent.
Transfer to third countries outside the EU
Any transfer of data to third countries (outside the European Economic Area – EEA) takes place exclusively in accordance with the requirements of the GDPR.
When processing your personal data, we use service providers who are based in third countries or who, in turn, use service providers in third countries. In this context, your data may also be processed outside the European Union, including in the USA. We only work with service providers who can demonstrate adequate safeguards for data protection.
On 10 July 2023, the European Commission adopted an adequacy decision concerning data flows between the EU and the US. The decision establishes that the US ensures a level of protection for personal data comparable to the European standard. Consequently, the US is deemed a safe third country in accordance with Article 45 of the GDPR. The transfer of personal data to the US therefore does not require additional consent. This is subject to the US data recipient having obtained prior certification under the EU-US Data Privacy Framework.
Duration of storage
Where necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and fulfilment of a contract. Once your data is no longer required for the purposes stated, it will be deleted. Please note that whenever data is deleted, it is initially only blocked and is only permanently deleted after a delay, in order to prevent accidental deletion or any potential deliberate damage.
Where statutory retention obligations apply, the data will be deleted upon expiry of these periods. The standard retention period applies unless otherwise specified in individual cases. For tax-related data, the retention period is up to 10 years.
Newsletter registration form
What personal data is collected and to what extent is it processed?
By registering for the newsletter on our website, we receive the e-mail address entered by you in the registration field and, if applicable, further contact data, provided that you communicate this to us via the newsletter registration form.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR (consent by unambiguous affirmative action or behaviour or explicit consent)
Purpose of the data processing
The data recorded in the registration mask of our newsletter will be used by us exclusively for sending our newsletter, in which we inform you about all our services and our news.
After registration, we will send you a confirmation e-mail containing a link that you must click to complete the registration for our newsletter (double opt-in).
Duration of storage
You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter.
Your data will be deleted by us immediately after unsubscription.
Likewise, your data will be deleted by us immediately in the event that your subscription is not completed.
We reserve the right to delete without giving reasons and without prior or subsequent information.
Revocation and removal option
You can revoke your consent at any time in accordance with Art. 7 (3) GDPR.
However, the processing carried out up to the time of the revocation remains unaffected by this.
With regard to the other rights, we refer to the overview at the end of this data protection declaration.
Necessity of providing personal data
If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link.
The newsletter registration details are neither necessary to enter into a contract with us, nor are they legally binding.
They are used exclusively for sending our newsletter.
If you do not fill in the necessary information, we will unfortunately not be able to provide you with our newsletter service.
Integration of external web services and processing of data outside the EU
On our website, we use active content from external providers, so-called web services.
When you visit our website, these external providers may receive personal information about your visit to our website.
This may involve the processing of data outside the EU.
You can prevent this by installing an appropriate browser plug-in or deactivating the execution of scripts in your browser.
This may result in functional restrictions on websites that you visit.
We use the following external web services:
Company 4
We use on our site the service Company 4 of the company Company 4 Marketing Services GmbH, Carl-Zeiss-Ring 21, 85737 Ismaning, Germany, e-mail: , website: https://www.company4.de/.
Personal data is transmitted exclusively to servers in the European Union.
The legal basis for the processing of personal data is your consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.
The service is a plugin that we need to be able to show you all the content on our website. The plugin makes our website more attractive and better to experience for our site visitors.
You can revoke your consent at any time. You will find more information on revoking your consent either with the consent itself or at the end of this privacy policy.
We use on our site the service Rechtstextsnippet und Module of the company Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, e-mail: , website: https://www.website-check.de/.
Personal data is transmitted exclusively to servers in the European Union.
The legal basis for the processing is Art. 6 para. 1 lit. c GDPR. The use of the service helps us to comply with our legal obligations.
With the help of the service, the contents of our legal texts are reloaded on our website. The respective current legal texts are reloaded via the integration on our page. This integration may also be used to reload further technical modules with regard to the legal texts or legally required elements.
You can find out what rights you have with regard to processing at the end of this privacy policy.
What personal data is collected and to what extent is it processed?
We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services.
The so-called "cookies" are small text files that your browser can store on your access device.
These text files contain a characteristic string that uniquely identifies the browser when you return to our website.
The process of saving a cookie file is also referred to as "setting a cookie".
Cookies can be set both by the website itself and by external web services.
Cookies are set by our website or external web services in order to maintain the full functionality of our website, to improve the user experience or to pursue the purpose stated with your consent.
Cookie technology also allows us to recognise individual visitors by pseudonyms, e.g. a unique or random ID, so that we can provide more personalised services.
Details are shown in the table below.
Legal basis for the processing of personal data
Insofar as the cookies are processed on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR, this consent is also deemed to be consent within the meaning of Section 25 para. 1 TDDDG for the setting of the cookie on the user's terminal device.
Insofar as another legal basis is stated in accordance with the GDPR (e.g. to fulfil a contract or to fulfil legal obligations), the storage or setting is based on an exception in accordance with Section 25 (2) TDDDG.
This is the case "if the sole purpose of storing information in the end user's terminal equipment or the sole purpose of accessing information already stored in the end user's terminal equipment is to carry out the transmission of a communication over a public telecommunications network"
or "where the storage of information in the end-user's terminal equipment or access to information already stored in the end-user's terminal equipment is strictly necessary to enable the provider of a digital service to provide a digital service explicitly requested by the user".
The relevant legal basis can be found in the cookie table listed later in this section.
Purpose of the data processing
The cookies are set by our website or the external web services in order to maintain the full functionality of our website, to improve the user-friendliness or to pursue the purpose stated with your consent.
Cookie technology also allows us to recognise individual visitors by pseudonyms, e.g. an individual or random IDs, so that we can offer more personalised services.
Details are provided in the table below.
Duration of storage
Our cookies are stored until they are deleted in your browser or, if they are session cookies, until the session has expired.
Details are listed in the following table.
Possibility of objection and removal
You can set your browser according to your wishes so that the setting of cookies is generally prevented.
You can then decide on a case-by-case basis whether to accept cookies or accept cookies in principle.
Cookies can be used for various purposes, e.g. to recognise that your access device is already connected to our website (permanent cookies) or to save recently viewed offers (session cookies).
If you have expressly given us permission to process your personal data, you can revoke this consent at any time.
Please note that the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by this.
This cookie is used to determine the origin of the visitor by means of the IP address and to set the language of the website based on the origin of the page access.
This cookie is used to determine the origin of the visitor by means of the IP address and to set the language of the website based on the origin of the page access.
Art. 6 para. 1 lit. f GDPR (legitimate interests)
Session
Basic functionality
If cookies have been set based on your consent, you can revoke your consent at any time in the cookie settings of the cookie banner.
You can adjust the cookie settings here.
Data security and data protection, communication by e-mail
Your personal data is protected by technical and organisational measures during collection, storage and processing so that it is not accessible to third parties.
In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so that we recommend encrypted communication or the postal service for information requiring a high level of confidentiality.
Automatic e-mail archiving
Scope of the processing of personal data
We expressly point out that our mail system has an automated archiving procedure.
All incoming and outgoing e-mails are digitally archived in an audit-proof manner.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. c GDPR (legal obligation).
The legal obligation consists of compliance with tax and commercial law requirements (e.g. §§ 146, 147 AO, §§ 238, 257 HGB).
Purpose of the data processing
The purpose of archiving is to comply with tax law requirements (e.g. §§ 146, 147 AO - obligation to retain e-mails of relevance to tax law) and commercial law requirements (e.g. §§ 238, 257 HGB - obligation to archive business correspondence).
Duration of storage
Our mail communication is stored until the expiry of storage obligations under tax and commercial law.
The storage period can be up to 10 years.
Possibility of objection and deletion
You can object to the processing at any time in accordance with Article 21 of the GDPR and request the deletion of data in accordance with Article 17 of the GDPR.
You can find out which rights you have and how to exercise them at the bottom of this privacy policy.
Dealing with application documents
If you have any questions regarding our e-mail archiving system, please contact our data protection officer.
In addition, we would like to point out that we only consider application documents in PDF file format.
Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and will not be delivered.
We do not consider applications in Word file format and other file formats and delete them unread.
Please note that application documents sent by e-mail without encryption may be opened by third parties before they reach our IT systems.
We assume that we may also reply to unencrypted application e-mails unencrypted.
If you do not wish this, please let us know in your application e-mail.
Right to information and correction requests - Deletion & restriction of data - Revocation of consent - Right to object
Right to information
You have the right to request confirmation as to whether we are processing your personal data.
If this is the case, you have the right to be informed about the information named in Art. 15 (1) of the GDPR, insofar as the rights and freedoms of other persons are not affected (cf. Art. 15 (4) of the GDPR).
We will also be happy to provide you with a copy of the data.
Right of rectification
In accordance with Article 16 of the GDPR, you have the right to have any incorrect personal data stored with us (e.g. address, name, etc.) corrected at any time.
You can also request that the data stored with us be completed at any time.
A corresponding adjustment will be made immediately.
Right to erasure
Pursuant to Art. 17 (1) of the GDPR, you have the right to demand that we delete the personal data we have collected about you if
the data is either no longer required;
the legal basis for the processing has ceased to exist without replacement due to the withdrawal of your consent;
You have objected to the processing and there are no legitimate grounds for processing;
Your data is processed unlawfully;
a legal obligation requires this or a collection pursuant to Art. 8 (1) GDPR has taken place.
Pursuant to Article 17 (3) of the GDPR, this right does not exist if
processing is necessary for the exercise of the right to freedom of expression and information;
Your data have been collected on the basis of a legal obligation;
processing is necessary for reasons of public interest;
the data are necessary for the assertion, exercise or defence of legal claims.
Right to restriction of processing
According to Art. 18 (1) GDPR, you have the right in individual cases to demand the restriction of the processing of your personal data.
This is the case when
the accuracy of the personal data is disputed by you;
the processing is unlawful and you do not consent to its erasure;
the data is no longer needed for the purpose of processing, but the collected data is used for the assertion, exercise or defence of legal claims;
an objection to the processing has been lodged pursuant to Art. 21 (1) GDPR and it is still unclear which interests prevail.
Right of withdrawal
If you have given us express consent to process your personal data (Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), you can revoke this consent at any time.
Please note that the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by this.
Right to object
In accordance with Art. 21 of the GDPR, you have the right to object at any time to the processing of personal data relating to you that has been collected on the basis of Art. 6 (1) (f) (in the context of a legitimate interest).
You only have this right if there are special circumstances against the storage and processing.
How do you exercise your rights?
You can exercise your rights at any time by contacting us using the contact details below:
Pursuant to Article 20 of the GDPR, you have a right to the transfer of personal data relating to you.
We will provide the data in a structured, common and machine-readable format.
The data can be sent either to you or to a person responsible named by you.
We provide you with the following data upon request pursuant to Art. 20 para. 1 GDPR:
Data collected on the basis of explicit consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR;
Data that we have received from you in accordance with Art. 6 Para. 1 lit. b GDPR within the scope of existing contracts;
Data that has been processed within the scope of an automated procedure.
We will transfer the personal data directly to a data controller of your choice as far as this is technically feasible.
Please note that we are not permitted to transfer data that interferes with the freedoms and rights of other persons pursuant to Art. 20 (4) of the GDPR.
Right of appeal to the supervisory authority pursuant to Art. 77 para. 1 GDPR
If you suspect that your data is being processed illegally on our site, you can of course have the issue clarified by the courts at any time.
In addition, any other legal option is open to you.
Irrespective of this, you have the option of contacting a supervisory authority in accordance with Article 77 (1) of the GDPR.
The right of complaint pursuant to Art. 77 GDPR is available to you in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn from the above-mentioned places.
The supervisory authority to which the complaint has been submitted will then inform you of the status and outcome of your submission, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Anfrage
Privacy Overview
This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.
Strictly Necessary Cookies
Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.
If you disable this cookie, we will not be able to save your preferences. This means that every time you visit this website you will need to enable or disable cookies again.
3rd Party Cookies
This website uses Google Analytics to collect anonymous information such as the number of visitors to the site, and the most popular pages.
Keeping this cookie enabled helps us to improve our website.
Please enable Strictly Necessary Cookies first so that we can save your preferences!
